This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft File: EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json) Hash identifier: 9bVa1JX05ur/JVziohff/4BYctv5JGJ/xFzRCuFqAfA= Subject key identifier: 72:49:E0:BC:C8:EB:D9:92:D8:91:1D:3A:9F:B6:20:0A:FD:79:61:E3 Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a Certificate serial: 019AF12DD6AAAD94EAC054FF453BCFF5B2A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: ZEu9rGKmdyieOUk88g4STRB103/RqW4CL6jjZyGoe5E=) 2: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (hash: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d6:aa:ad:94:ea:c0:54:ff:45:3b:cf:f5:b2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=7249e0bcc8ebd992d8911d3a9fb6200afd7961e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:d7:66:07:de:7d:92:b4:99:b7:e7:1e:bd: 3e:86:69:4d:70:4a:12:71:a5:18:87:0e:48:2f:40: 24:8e:ff:c5:4c:3e:62:d1:2d:25:66:0a:a7:41:00: 05:f6:0d:99:ce:f2:33:49:89:47:cc:8f:6f:2c:43: c3:de:b0:2d:8b:cc:da:7f:ba:cf:07:c9:c8:a7:df: ec:a7:07:f9:d8:dc:6c:0f:de:c3:79:a0:b8:3d:d1: 47:cd:f3:3f:44:93:d0:13:94:76:64:b0:0b:d0:0b: d9:dc:86:c9:2f:e7:42:9e:fa:85:aa:73:07:9c:d9: 1b:13:1e:ed:6a:c1:dc:9c:6e:3a:97:d0:e0:a7:5f: 36:04:d2:c3:9f:d7:9d:5f:5e:3d:6c:a7:bf:d6:e7: 7d:10:96:89:d4:66:22:1e:60:a7:60:47:b2:b3:7f: c6:72:12:09:fc:86:35:09:39:6d:d9:5e:2f:2b:ad: 34:70:5e:25:10:d1:22:c4:39:fb:db:fe:a6:ca:e5: e6:e4:6b:51:6a:49:d0:06:4d:a3:eb:c0:22:3a:8d: b1:99:65:27:1b:09:5e:17:92:c0:35:f8:66:e9:f1: 79:35:be:ed:5a:a1:17:85:11:58:98:d4:96:9f:a3: 2e:d6:13:85:5a:6b:28:36:28:c0:8d:89:32:a9:ed: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:49:E0:BC:C8:EB:D9:92:D8:91:1D:3A:9F:B6:20:0A:FD:79:61:E3 X509v3 Authority Key Identifier: keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1f:7a:c3:41:ec:24:18:b6:eb:36:26:6f:de:51:77:95:b6: 82:49:76:b1:c4:fd:05:6d:38:c2:b8:20:d6:01:8f:4c:d9:f2: e0:ad:08:9c:da:b2:23:43:c0:c8:8e:ae:02:10:6b:36:af:f3: d6:dd:bb:69:ce:89:5e:a3:06:1b:bd:f3:12:a3:db:16:da:ef: 17:ec:41:ca:68:98:eb:eb:73:b2:ad:f5:d5:04:5c:65:6c:d0: 2f:2f:d9:fb:87:be:3a:50:73:60:39:54:ce:3f:de:83:36:82: a5:85:f0:b1:44:12:2e:46:aa:2e:b8:89:8a:cc:19:48:78:48: 31:65:d2:23:5d:f4:b9:29:fd:72:04:f0:c1:2a:1e:99:bc:f8: a5:88:45:46:10:a6:f6:91:80:1c:16:d0:6a:4b:8c:97:1b:ee: 26:30:ca:79:fa:93:76:33:64:fe:25:d1:f5:1c:d6:8f:ba:aa: d2:d6:94:04:d5:71:02:c6:63:d1:95:88:4d:65:9c:b2:7d:c8: c5:f7:f8:e0:f6:56:7b:82:f3:fc:9a:0b:25:19:d0:45:8a:c9: 5c:a6:29:ec:53:79:77:19:fc:c4:cd:a3:81:8d:7e:14:65:94: de:c3:b1:19:31:fb:83:4f:89:7e:21:20:0a:bd:00:73:aa:ba: 85:52:56:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdaqrZTqwFT/RTvP9bKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNmMwZjM5NTQxMGYyODZjODU3NjU3NmQ3ZDJmNzgzMDRi NWU4M2EwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD Eyg3MjQ5ZTBiY2M4ZWJkOTkyZDg5MTFkM2E5ZmI2MjAwYWZkNzk2MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7/XZgfefZK0mbfnHr0+hmlNcEoS caUYhw5IL0Akjv/FTD5i0S0lZgqnQQAF9g2ZzvIzSYlHzI9vLEPD3rAti8zaf7rP B8nIp9/spwf52NxsD97DeaC4PdFHzfM/RJPQE5R2ZLAL0AvZ3IbJL+dCnvqFqnMH nNkbEx7tasHcnG46l9Dgp182BNLDn9edX149bKe/1ud9EJaJ1GYiHmCnYEeys3/G chIJ/IY1CTlt2V4vK600cF4lENEixDn72/6myuXm5GtRaknQBk2j68AiOo2xmWUn GwleF5LANfhm6fF5Nb7tWqEXhRFYmNSWn6Mu1hOFWmsoNijAjYkyqe3SEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJJ4LzI69mS2JEdOp+2IAr9eWHjMB8GA1UdIwQY MBaAFBBsDzlUEPKGyFdldtfS94MEteg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQt MzQwZjQzMzU4NGQyLzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQtMzQwZjQzMzU4NGQy LzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATB96w0Hs JBi26zYmb95Rd5W2gkl2scT9BW04wrgg1gGPTNny4K0InNqyI0PAyI6uAhBrNq/z 1t27ac6JXqMGG73zEqPbFtrvF+xBymiY6+tzsq311QRcZWzQLy/Z+4e+OlBzYDlU zj/egzaCpYXwsUQSLkaqLriJiswZSHhIMWXSI130uSn9cgTwwSoembz4pYhFRhCm 9pGAHBbQakuMlxvuJjDKefqTdjNk/iXR9RzWj7qq0taUBNVxAsZj0ZWITWWcsn3I xff44PZWe4Lz/JoLJRnQRYrJXKYp7FN5dxn8xM2jgY1+FGWU3sOxGTH7g0+JfiEg Cr0Ac6q6hVJWxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:06 2025 by rpki-client